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(54) SHUFFLE-DECODING SYSTEM WITH CERTIFICATION AND METHOD THEREFOR, AND SHUFFLE 
DECODING VERIFICATION METHOD 

(57)Abstract: 

PROBLEM TO BE SOLVED: To provide a shuffle decoding system with 
certification capable of efficiently processing calculation quantity and 
certification statement quantity. 

SOLUTION: This system is provided with a shuffle-decoding device, 
having certification for generating a shuffle decoding statement and a 
shuffle decoding certification statement and a shuffle-decoding verifying 
device for verifying the shuffle decoding processing, by referring to the 
generated shuffle decoding statement and the shuffle decoding 
certification statement. The shuffle-decoding device with certification 
accepts the input of a plurality of cryptographic statements and a public 
key and the secret key of the decoding; generates the shuffled 
cryptographic statements by enciphering the cryptographic statements 
with the public key by exchanging the order of the cryptographic 
statement; generates shuffle decoded statement statements by 
decoding the shuffled cryptographic statements with the secret key; 
generates a response to be referred to when executing certification, and 
generates a certification statement for certifying the validity of the 
exchange of the order of the cryptographic statements, the 
encipherment, and the decoding for generating the shuffle decoded 
statements based on the response; and output the respective generated certification statements and responses 
as shuffle-decoding certification statements. 
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ffif)> «KE'>*y7;l/«#A^A*«nfcil(nEi«#A* 
IEU<*>iry7;l/*#LfckWS-r5Ck*wak-r* 
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m%ffiammici3^r. m^y^yyjim^mmiat. 

zxnmxim&mmc * k> Ht^bL./t^^ >y yjim 
frBgmjtmmw&mic * o m^t zumxhzim-y 

tSCttt¥fWt£?Z> 0 

[0022] mm 5 <d*%w<di/ + v yjvm^mm. 
mmtm^y^yy^m^toxti^fx, mm io 
ft®<Dffimttm.w±<Dimmi3m? x^z c tzmm 

n cms© Ann* t st^ftcDjaa t ^ c t 
z&M.?%m-$mm®£> mi^\yy)V^mm 

*v\syvt<DXt>*&vx, m^y^yyfm^ 
i>\ im^vvyfrmfr^xzMmmmmzm^xjE 
l < m%Lx£.f$.2tirc£ tztmtzmmm&t* 

a^iE^o^n^ntcfc^T, zxiEiMtm&nrc: 

[002 3] 6 ©^fgBJ^fPJlttv' * >y 7;l/«*t 

mL<D^mc^i/\ "j-y >viM.m,xi/\vy)i 30 
< ftt>ntcc tKwmtzwm-xxhz.i'* yyjvm 

Xffia&*s t y 7;l/«f U fHESEiPllcfc^T* 
t\ WfB^ J v>y7;l/^i*4^-r5fei&cDMI3JiH#0 

xnmz. tmmmmtt mm.^ti03V s ^ n=e n© 
m&zmt5M.wjc*!iii&L. mdazi&ztiit&m 40 
wjctmmvxtfyxt*. m&fvvyfr&^mmj: 

[0024] mxm 7 (oxfrnommui/ + v 7;n»# 

t, iffiffim<Di^xo>mmz\nm7Lxm&&&\mic 
<fcOBf^b-rscfcK:«fcD> «neaa©s/+-y7;i«* 

BS^X*^r«^ir >y 7;1/Xf >y mji2Jt&4» 
+ y7;l/Sf*B&#itMIHS®ai:©A73*S»T, Sfl 
B^* v 7;l«*«ra**i&IEIM&«lc <fe 0 fl» Lfcsu 
E«»4>S/+ -y 7;H^Mt5SfXf7 7t, 50 
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sttr, wmis* v y^m^mmic^^t^mmy-r- 

vy°zffiz.z£t*ftmt.?z 0 

[0025] m>&m8<D*mi<Dffl9itt ; y*yy>i<m^ 

T^*cfc*aE9i-rsiEra**4iau fro, mibatj 

£$-r3MMEXr>y7^ «ffiR-S»HWXry 
7t S&fEB£Xx-y TUttfSMfS'J X#>x*4ijW 
5U7#>7.^fiK7>r-y7i:, mffS^^ «y 7;l/^f*B§# 
** t tW3HHfi(l*ffl«i^TiEL< 8»*nTtWBS'* v7 
tilt c i: ^EH^-r 5 » WsB Vx$yx 

fum-^BSsmxT-yT't. mmwmm^Tyy't. 
wv)x#y73Lj&*7-vy*t, im&m^MmxTvy* 
K#^x£&znrz&mmm , mjc£imv xsK^xoi 

T*, MfE^*y7;l/^#SEW^i:LTa7j'rSiii:* 
[0 0 2 6] M#H 9 0**80114)5'* »y7;Ha^ttiE* 

fttt, «aonwx*s'*-y7;i/a^uT*ia*nfc5' 

•v <y 7;MSt<§**, S^'>* «y 7;I/S#i©iilBS'-v >y 
7;I/(B#4)®l36l«iEU<fft>ftfcJ:i:*KWrsSEWA 
T-fe^i'* -y y )Vmwm±*m*!kL. MIEv'-v >y 7/1/ 

«^4)®a^iE l < tT^nfc d i: *ttffi-r * + y y>i 
mmkmftmos^x, wm^\yy>v^mmx\t, 
®m\cis^xmk?% u x-fyxt, Mi2nt^4)ii# 

*An«ATfl8gB^BMIlc <fe ») Bt^fb bfciy + >y 7;bM 

*v7;va^**4ia-rsjaa4), m^tt^iEW-rsfc 

[002 7] 1 0 4>**gf0§4»-V <y 7;I/«^«ffi 

73^a, BuE^*-y7;l/aW^tMi2Hg^i:t3fe 
^M«i:ME'>+'y7;l/a#35:i:4)A7J%^T, Me 
)«S4)An§^RtfMfBBt^fbfeH3^ 5 S^Bf ^ico^ 
«F«iS4)flWH*lEra*4)tPJ««3W*o Tt^ C t^^BE 

RCiiss4)An#^ tBg^bcoiaat^sttTv^ c i: 

#1EW*© A* i: l»Era-«ft«WEXr v 7x<£&zn 

tc?vuyi?<D\ti£zgifx. m^macttLxm 

>y 7i: , MiB^ * -y 7;l/^^iE^3i: i: fflm-mm 
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EXr-y7^ MEBJfttttt^ry^i:, JfflBOWWE 
f So 

[0 0 2 8] M&B l l o*«WOHWf«f * 7;b« 
§^fAS, tBROPWA*S/*v7il/*^bTftjji 10 
Ltd/* v 7>V&^±<D, MEf + ^ 
IE L < tT^nfc c t*Wm S/* * 7/1/ 

U * >y 7A>9mW9&OC&"3 

«f>T«MES/+ 7/WWJMWIEL < fffctifc c 
*ttW*KIJIIf*S/+ v 7;l/a#^XxAtcfe^T, MIB 
aftOBW**^-*- >y 7;W» LTS/ir y 7;MH^A* 
U aoHES/ * -y 7;I/a#aEWS:*4jS"r *HW 
v 7;l/»f SK , MtfflZi' + >y 7;MJI 

wxz&mu mny^yy^mnomm^iEL^nt) 20 

nfeCfc%ttlE-r*S/ir'y7;Htl^ttliE«ll*ffliL, tt 
!BEHJ^>+ >y 7;l/«*SB(4, MfBB§^;fc©JiK#*A 
n#*.TffiE&BH»c «fc »>«HM:Lfc3/* <y 7;l/$r#ug 

8(fiaaiffiaKJ:»)^tTMie^+y7;i/^ 

J«U MfBUX#>XtcSc5^T, MIES'* y7/U«# 

HufB'>^-y7;ba^lIWii:LT(±17]-r§;:i:^1f 30 
[00 2 9] 1 2 (D*mXDM!m ^ * V 7>V& 

^i/xrAa, nmmfmi/*v7>v&^mm&, mm 
mmmztmwmmtvxiizgvx, mam 

SCfc Kit), «HE»»OS/iry7;MS*l«<fA*4ia 
•rs^^'y7;b»fc» iWEa»OS/+'y7;M«*i«#* 
4:MISH5*«i:OA**S»T, buIES'* >y 7A4ft#lft 
#**SW3H«B«lc <fc D«#Lfc*Ke««©'>+ v 7* 

BB«kBW3Httai:fl!)A73*S»T, fusEv^^/MS 
€EE£££$-f 3Ei£gp*<I* S c i: £ f So 
[0 0 3 0] 1 3 0*«W©ffiMMfir*y7;I/tt 

§->xfia, ««EHW(**>* -y 7;l/a#«B©«fiEE 
WSPti, *^#©Aft#*fc:fcttSilu^;tf(5§l«fc 

EWfcfc&KU fro, MfEA££ft3Bg*t:fctfa&© 

cj®#©Anif*££ftraca&T*&g£nfc<: £*e 
w-r*Ew**&arr*ra-«i«EiflWfc, siheatj* so 
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n^Bg^EttLT©, !®#©Aft§;ttfIEL<&2tt 
fcCfc*iEiB1-*ttlfl**4iai-SB»Eifl«i:, WIS 

4fig-T5UX#>x4^i:, fufB:^y7/l/grWf 

S&fBUXtfyxo^Tfc, MfBS/-v«y7;l/^§EW*4: 

[00 3 1] Ift&H 1 4 y 7/Wg 

§->7,fili, MC^ir9 7;MK94MBtBtt % SufB^ 
+ >y 7;l/«#iEB^^i:tufBB^ii:MfB^F^i:MfB^ 
■v >y 7;l/«^X i: ©A7j£gttT, inffEIJI#©An#;L 
&tf WSB&WtK. fcttS aa»«^*©S»rt«©1ll 
aEWX©f^ja«I)WoTi'»*c4:*ttEU ftl/Vf 

**iau mk, wEA**n*ie^A3!««s©sa»© 
KR-ess^ictt, *n^n©sBR^is3i;)B#©An 
#*fcH»fl:©jlHii:««»T^*cfc*WEf*n- 
S«MMSE»&> «HES/5ry7;MmtBi!*©X*fc«nB 

X, MBW»*lcJ*bTJI»©An***<iEL<ft«n 

X*«WT, ME^+v7;I/«#X*«, Huffi^+-y7 
;l«*i«^**i»EBH!fa*fflV''TiE t < «#LT4^ 

ftttSffi^:. ME«KtMB*£, «»Ea^*IEgi5©*n 
^titfcv^T, ^TiESi:«ME*nfc«^KR?}, MtB 
*s* <y 7;I/«#*jyA7J*nfcSI»fBie^X*iEL < 
>y 7;l/«^ Lfc kffi&r 5 c t *&®ttZ 0 
[003 2] nim i 5 ©*HW©H^#^+ >y 7;K« 

a»©BS#X*'> + >y 7>Mi^ tT-> + >y 7;P«#i* 
^oMIB^ + >y 7/MlC^«fflWiE t < bti 
c: t *W.Wt%Wm-%X*ib 5 -> + -y 7;l/«^iEW3J:% 
±JiW-«EWM->ir >y 7;l/«^7a ?9 AEfc^T, » 
fBW#X©*»« AtiS A Tfliffi^Wafc «t ») Bf^fb L 

tulB'> + >y 7;H[#**4ia U huIBEH^ t *>i^T#Hg 

tufB^-v >y 7;l/«^**4i«-r *fc»©ittiH»i#©An 
#A i:Bfrf3Bg^{bi:mItBa^«b E*5(t5^n^n©iES 
tt*ffiWr*EW**4jat, ffif3£$£ftfc:£EfB:£ 
tmifBU MfB->+ >y 7;Mi9EWi b 

[003 3] 1 8 ©*»l!©3/ir >y 7;MB*ttBE 
7d^5A«, 3>bfa-***J»^*{ifclcj:»), 1t 
^©B§^*^+ >y 7;l/a^LT^E$nfc>^ -y 
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®.m&Zs SSr7*y7;l/«^:£©mlfB7*y7;l/ffl# 

©$ag#iEL < nt>ntcc t *wm?%mm%T*ib% 7 

StflEL < ff ^nfcC fc*fclW5*7ir 7>v&m%w. 
-7u?7l±\Os^X. HufE7*y7;l/«^iEB£:£«, f£ 

Bjifc:i3^T#Brf3yx#7xt, mmv%mc<Dm%z 
mmtitmzmsmK. * *> a^-r **yn?fc*&He*7ir 
(Dms&v x#yxfcS^T£$£ nrzuwxtz^ts 10 

[003 4] 

[003 5] [ttHHtt'7* v 7)Vmism *fflR<DK. 
£$Mi:£AftLT, *©Bg*f:££&&88lfr&7*'y 

[0036] mmfrywyfrxm oewnhw 20 

S/*-y7;l/#&) fcffllrvc, 7**y7JWS#WHt£i:'7 

+ >y7;HiEW^^-r5o t©ffiiflf<t7+y7;l/©*0 

scfc^-e**. fit, *%wicfev>Ttt, M.mjc±& 

[0 0 3 7] &fc, &H^£fcT7+y7;P&*Bg^:£ 

U e:ti*^^>y7;l/|iE^3i:}cAn^5 0 30 
[0 0 3 8] WEIg»3WESKf^J«*nfe!: to 

[003 9] [S/+ * 7;Ptt««SE*tt] #^©7* 

^AkS/iry7;MI[#KlH*k*A* i r*. CC-ff*» 
BET-f4, l ©7+ y 7;WMUc**t * >y 7;W£ 
WSHtioftfeOfc, a^CfcAftLTW&ffSo ffi 
U 7-r-y7;l/«WE££^3:ftS rUMEfijeicfeV 40 
T> 7* >y 7;l/»*m#AO«b D t*^**fflv»fefc 

©IE3tt©ttlE) TIES J "CfctUf, 7* 

y7)l>&%<omffl&%tLX TiE^J *51*ft»*n 

[o o 4 o] m i a, *5m<D~nm<DBmic£zm.w 

tt7+ <y 7rt>a»7Xri»©lPMl**-*-:/o >y *0T'& 
5.01 *#fia"T * t x *HJS©«iW)EIHf* '7 1»7 50 
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Wf*-7+v7;l/**Bllli 0^ EW**Sk:«ttE«fT 
5fflil©gBT*&57*>y7;l/«*l&fiEgB2 0*flM.T 

[00 4 1] 6E(!l§fih7+ >v 1 0 (4, S/ir * 

7;M»l l, «4§fltl 2, Wft&i 3*flM.Tl^*„ 

[0 0 4 2] <7+y7/W»l 114, «»©l«^ii:»HI 
Hi:©A*i£§ttT, A*iSnfctt»©W**©*#* 

7* v 7>i«jww**ft*r *. 

[0 0 4 3] «#gpi 214, 7^>y 7/I/g&l lfcJ:D£ 
£SttT, 7+ <y 7;M»*«»**iBffi«(C «t 0 L 

[0044] mm® i 3(4, *ttett?£&£Mft&iB 

^fcfcl^^THlftfcfc&S"*-*. iEWSPl 3 {4, a 
Kra-S«ffiW»l 3-1, ||gtffi93ffil 3-2, UX 
#7X£$g|5l 3-3, ftWHffil 3-4£<i*.TV 

[00 4 5] RUgfiUBBW 1 3 - 1(4, 7+ «y 7;M» 

1 3-1 {4, A*«n*«H»*3{«a»0»*OB*35p6 

[0 0 4 6] BSUE^aS 1 3 - 2 14, A*«n*fl»* 
K»tTO> JI»©An»**«iEb<a«tifcci:*B 

iiw*»fl*«±*r*. y x^yx^sp 13-3 

(4, P-^H^a? 13-1 tH^liEB^gP 1 3 - 2 K*f 
-rsyX^7X%^-T5o «^fEWgi5l 3- 4 a, 7 

So 

[0 0 4 7] ^LT, UBJ!tt7Yy7/l/&*§gg 1 0 
(4, P-^glSEWSP 13-1, gglBEB^gp 13-2, U 
X^7X^aJl 3-3, m^SEB^gPl 3-4t<fcD^ 
$£n£EBj§;£tyx#yx©£T;£, i/fy7;Hf 

©iEB^3S:i:UTa*-rs„ 

[004 8] 7+ y 7)V&mkW.mm 2 0 (4, 
^SEgP2 1 , gg|^fEgP2 2, «^ttaE9S2 3%<f^T 

[0 0 4 9] m-mmtt8&2 U4, 7+y7;I/^SE 

vx^zcuz&m-rzo s^, ra-s«wtt£a{2 1 

(4, A**ti*l«#X*«tB»<OSE»©SiRfc4*«^ 

(4, *n^n©®i6tfrai;nB»<oAne*fcBi#fl:©«i 
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2 Hi, 4*fEIS$£ TiE^j Xtt r^p^j tbTffl*) 
[0 0 5 0] S&&SE352 214, f*y7JWt&W98t 

A3WEL<4«nfcCk*ttaEU ^<o^K^«* tie 
[00 5 1] OmmSSBl 2 3 H\ >y 7A>QmWB*. 

[00 5 2] v' + >y 7/l/«^&SESB 2 0 tt, C <D|^- 
^«!^IIg|5 2 1 , SSI^IiEgp 2 2, 3<D^e 

>y 7;l/tt#X««A*«nfei«^X*iEL < s>+ v 7;Hg 
[0 0 5 3] KT, #£l*0JBt8fc:fc^T«\ E 1 g a 20 

[00 5 4] [Elgamallg^S] Elgama 

ftttlcHff 
p = k q + 1 

fcSSfcbTl^SHOOjRftp, q*£«>*o cn^I 
SBElCamal K*>f>/<7**fc"?tftlSo Sffi 
it 30 
x£i Z, 

(go , mo ) 
*tt«q©Z* P 
mo = g o mod p 

[0 0 5 5] Z* P ©HjRT**¥X 
pez' P 

s£i Z, 40 
(G, M) = (go > mo 5 P) mod p 

tuff*. co*»**a^-r*icttittWi 

P' =M/G" mod p 
ktt»r*. £^£P* (4, TOPIC-HOTS. 
[0 0 5 6] C<1T\ 
x6« Z, 



KpM2 0 0 2-3 4 4 4 4 5 
18 

{@©xj (j = K n) fCfcOS'Jfflt^icm^? 

n, 

x = (xi +"4x. ) mod q 
jWS 0 ifO^T'SSo *Wffl»T*{4. C <0 x , ( j = 
1, n) *a^ffl©^g|^if^<li:t'rSo 
[0 0 5 7] COBftWifc^fctM-TSfctt* ft 1 

T?miCffloTV< «^«ft*, fro x , ( j = k • • 

[ftl] 

G Xj mod p 

[0 0 5 8] [BfJfi] AfcSn* nffiDWHfcS:*, ft 

2icj:f3^$n5fe©i:-r5o ^tt^noug^o&g 

3t&ftftq<9Z* p ©7CT-&£o 
[ft2] 

(gi^nii) i = l, ... ,n 

[0059] mmc] mti * ns n <@©«*t , 

ft2tci:')^£ft3 ! £><0i:-t3 o S-ft^n©**:*©* 
[ft3] 

(gi.rfii) i = l,... ,n 

[0 0 6 0] cne.(i, ft4t^$n-5n<@OBf^© 

[ft4] 

(gijini) i = l,... ,n 
[006 1] M{I£$Hft] SMt«£jftHftlco<r'> 

So 

[0 0 6 2] $-f, ttBB#3Wftffi#KKWbfcV»CfclC 
M-r^n^-y h^hSr&S (Xf'yT'Al). =tL 

x, immm®m*M.mmcmz (xryyA2) . 

*bT, SEW#tttlH!Hlfc»LT\ ifi»*3l« Uf7 
7A3) o *bT» «ME#(4e:n635y So 

4) . 

[0 0 6 3] <KOJ;^*WS^|iEW^Ph3;l/T*^ SE 
[0 0 6 4] -T*t>^. 02<D7a-^^-htc^n 
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hX. ttS#tt. HBiif*»&a&&ft;fci:ft&=!5yM 

>k until, is«AiMi«&Kifloiift«Mer« c* 

[006 5] &±<D& o tt&tMWB&'fu h n;l/T« 
fi, Xfy^B l^Xry^B3$T-<0FI, SEW#« 10 

[0 0 6 6] ±IBtHSffl«£j£-r«H»«fiHRtt£fiSBB 
ftfci*tf, Cft*» 5 
[006 7] 
□R5] 

i = l,...,n 

SMB«4iaBI»Oia*li, n + 1 fflO " 1 " , " 0" T* 

[0 0 6 8] sm»^M^o*#W^«^SoPJi: 
QR6] 

ff,(x) = Hash (( Hash <x))' mod q) mod q 

[0069] [«jMf mi m&nmco^xmmtZo 
ccx rjBftfxjijj *, #fT#5>Jfc "o" -efcvMjBW 

*-#fcU "0" T'&£>ffi%Z q ±<D "1" t-r 
*nfrXn5>J©iE*ff5>Ji:«i|-r*. Wfcl/t, ®L7<0 

mmibtft>ti%o 30 

[®7] 

'0 1 0 o - " 

0 0 0 1 
0 0 10 
^1 0 0 Oj 

[0070] [i/* yyMrW] *s v~7 )VnWtW& 
1 %><, rs>+ >y 7)Vm\\ n + 1 ff x n + 1 ^JOff 
W 

{A P . , } (/k v = 0, -\ n) 40 
f$oT, {A,., I (Kj = K- 

'■» n) : nff x n ^JcDBgW^J 

Ao.J , Al.O , Ao.O 6» Zq ( I , j=l, 

n) 

[0071] mm* + v 7^a#] *¥%m<D-nffi 

[007 2] ['>t77;l/Xf-yy4 0 2] Hg^fii;^ 
5BS4 0 1 50 
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(gi > mi ) , (go , mo ) : (i = 1, 
n) 

#A2j£ft3o 
[00 73] i/-v>y7;l'X7 i >y7 p 4 0 2tTttic 

<Di/-\-y7;Mff84 0 3 
Ao. j 6n Zq ( j = 1 , ■ ••„ n) 
A i. j : m&m\ (i> j = K n) 
£*g{irf So 

[00 7 4] *s* V 7;l/jg&Bg*f £ 404T*$5 

» 8 «9©Sfc«t»)W-|l"r*. *b 

T, 2/ + «y 7;Wf >v 7 4 0 2 «\ v 7>lffi $8 4 0 
3£>>*<y7/l/$f#Bg^:£4 0 4 ^Htfj-f £ 0 

[»8] _ _ 

i = l.«.,n 

[»9] 

n 

& = I^[gv Avi mod p i = 1, ... ,n 

v = 0 
n 

mi=J~Jm v Avi mod p i = 1, ... ,n 

v = 0 

[0 0 7 5] [ifXr'^4 0 5] z/*v7>lffifrt% 

mz4 o 4 tvmmemsmA o o t&xtizn%o # 

So 

[ftl o] 

gi = g ; mod p i = l,...,n 

ffij = x m"j mod p i = 1, ... ,n 

[0 0 7 6] [H-^&SEB£Xr-y74 0 7] ->^y7 
;W*«4 0 3 i:Bg^X4 o l fc&&884 o l tfiXttti 

5o ffit©SL»4 0 8 

A,, o €i Z q (/i = 0, • • \ n) 

4 0 9 £ LTfcWjf So 
OKI l] 

So » m 0 ) 

[Si 2] 

n 

&>=n g v Avo m ° d p 

v=0 
p 

m 0 = ]~[m v Av0 mod p 

v=0 

[0 0 7 7] [§&tPJ3X-r-y74 1 0] ->fy7;W 
T77*4 0 2T-£$£ftfc>'*<y7;Mi$84 0 3^1^— 
%$m.W*7-v7'A 0 7T'£$£nfcSU&4 0 8 tfrZ 
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^i/^yy)Vn3\ * o, p, p' , A P e K Z, (jj = 0, n) 

A,., mod q v = 0, n) g — g° 

[0 0 7 8] ^fc, (0, lT'liWttMS * BR 13] 

n 

♦i = 2 ( 3A jo + p'^j) A ji mod q 1 = i» — > n 

n 

*i = 2( 3A i° + 2 P' X j) A jo A ji + P A oi mod q i = 1 > ••• » n 

j = i 

n 

♦o = 2( A jo + P' X j) A jo A jo + P'^o + P A oo mod Q 
j = i 

n 

Vi = ^2A j0 A ji + <* A oi m od q i = 1, ... ,n 

j = i 

n 

Vo =X A j° A J° +ctA oo mod q 
j = i 

v = g p ,v' = g p, ,v 0 =g*",v. =g*i, 

Ui = g** , u 0 = g^ , u £ = g** mod p i = 1, ... ,n 

CO 0 7 9] C CT'ft 1 4©£g»©ffi*. l^SEW^: » OR 1 4] 

4 1 1 fci/ctfttrrs. K 

v, v 0 , vj , w , w 0 , w ; , V , Uj , u 0 , Uj i = 1, ... ,n 

[0080] [UX#>'X4^Xx-y7 P 4 l 2] 8f#£ *<D5£fi: J: OBtf*. 
fc£PMI 4 0 1 tra-««KlflA 4 0 9 ^ffiffifiEffl:* 4 [ft 1 5] 

1 1 tmmt 4 0 6 t&xjjzn, u>^«ft 1^5 

c i =^i(go»gj» m o» m j»go»Sj» m o> m j» 

V,V 0 , Vj ,W, W 0 ,Wj , v',Uj ,U 0 ,Uj 

j = 1 , ... , n) , i = 1 n 

[o o 8 i ] 3wc y ft i 6 ©sk.* k> mm tmnm<o%mm 4 0 0 1 u x#yxi^xf7 

f5o 40 jSSftfcf-* b>>?4 1 4 £#A±l2ft3o file© 

[ft 1 6] 0£r mod q 

r |i = 2^Vv mod( l H = 0,...,n [ft 17] 

C = PJg° mod p 

i = l 

ti = £*' mod p 

i = 1 , _ _p . 

[0082] m'&ic, m-%®m.w%. t mmmx tv ^ , ~_ p mo p 

X#y* tttisvv 7 frM.®* 4 1 3£LTtH*rf£„ m o-8o mod p 

[0083] iimw.w*7~v74 1 7] m.mc.A 06 50 [0084] awm©*-* fti 8© 



A, = A 0 + ^ A,; rj mod q 



(13) 
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CS18] 

c' = -Ef 0 (G» T l> T l , »go » m 'o » m o) 



co o 8 5] #tc, mnm.w<Dvx#>x* 

r ' = c ' x ' + /3 mod q 

» »» * 

7J, TJ * ITlo N r 

[0 0 8 6] [KBBX] R^HMEW*i:ll«ttEW*fc*lO i&l_9] 

Ci =i/ i (go,gj,m 0 ,m j ,g 0 ,gj,m 0 ,m j ,v, 

Vo.Vj.W.Wo.Wj.v'.Uj.UQ.Uj 

j = l,...,n) 



24 

1 6HLXmtS?Z 0 

[0087] O + y 7/l/«^&SE] :*3&*0*tt©5' 

[0 0 8 8] M8i«i7f<y7l '>+>y7/MS^ 
SEW* 4 l 6fcB8#£fc£W84 0 l t«^£#A7j£ 

■So 



i = 1 , ... , n 



[0 0 8 9] »2 0OSjy<«t)itTtf TIES J 

[S2 0] n 



58 [0 0 9 0] [SSMMEXryT] S/*v7AA&W!i 

jsofifeft^ntr r^aj ^ai^5 0 2-r§ o 

20 [&2 1] 



v = 0 



Qm/^ =i 1 ]^[m v Cv mod p 

H = 0 v = 0 



u = 



"oil" 4 ' 8 ' 1 m ° d P 

i = l 

■ofi^nv mod p 

i = l i = l 

rO g Zr=l^- c2 i) = ^ o "Q^q modp 



v v i=i< r i-<v 



= V n 



i = 0 



[009 1] [«f«IXf 771 >y 7tV&mm 
[&2 2] 

c' = H 0 (C, , r\ , if , g 0 , m' 0 , m" 0 ) 

[0 0 9 2] |![ 2 3<D3.tff&K>iLT& 

[»2 3] 



go' = m'/ml mod p 

(n^y-tiV modp 
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i = l 



[0093] n-wmm.T.T-yfhm.mmxy-vzf 

■i-y 7;l/m^lE©tti7J 5 0 4 i:-T5o 
[0 0 9 4] &:Jb\ *H»0»»OSEW(*->^y 7;l/« 
§->XfAit ffi8M*$'+v7;Hi»SsiIl 0OS>*v 
7;l/S5l U »§»1 2, E^gPl 3, l^-^U^gp 

i 3-u mmtw&i 3-2, ux#>x4j«ffi 3 

50 -3, «TOU§gi5 13-4 ©«flBJf\ y 7*tt*4ft 
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fESB 2 0 ©ra-£#WttE9 2 1 , OHftmSSIS 22, S 
-#7n ^ AT*fe§EW#->+ >y :7;l^7n 

ggs© * * o tc a - f £ n 5 (i t T*nmt zcttfx* 

CO 0 9 5] JM±»$ U^0»«fttf£jMH*fctf 

So 

[0096] 

wttisv v yjvtcwmvm^ma LK.m-&<Ditwm 20 

[0 0 9 7] flfH*^ AJjB&JfXORfcn LfcBf, * 
iK 2 0fl&*^*ffllr-»TSEI||f5h7+ >y 7;I/KSEW(«f 

VfcOKWLT, *^WK<tntfS*3lJ^^a n + 3 
[0 0 9 8] *^tC*5V>Tff^S*fJ^tt, ft 



12002-344445 

26 

' [0ffi©fB3i&IBfE] 
[0 l ] *»WO-liai©«lUc iSHWf*^^ y y 

m 2 ] *awcMte*0jBiBfc i zwmtt > wy 
>v&^>7.7-i±<Dtimzmwtztctb<Dyu-i-v- v 

[0 3 ] xmiv-m&o&mK. <t stanm* t»7 

[0 4 ] #fgHli©-SISi§<D7gfifc: «fc 5 f+ <y 7;l/£*§ 

[@5] u&(D&mcmz>>iim*mw-r5rctb<Dy 

[06] 86*OIEW#'>+'y7;l/©«S%ttifl"rsfc 
46©0T*S-5 O 

[0 7] 86*OIEW^a#©«Bl*ttW-r*fc4i>©H 

[08] 0 6 £ 0 7 ©8e*©atB*ffl*^te*fe«iS 
^•T0T'fe§c 
[8H§©i&HI3] 

10 wm^yy^mnmm 

1 1 J/f^/l'S 

1 2 a^gp 

1 3 tiEwsis 

13-1 isi-ggssEwas 

13-2 B&KIHffi 
13-3 VZ$>X3xm 
13-4 ft WHtt 

2 0 i/*y7frVm#M&m 
2 1 H-g&fclEgP 

22 mmmm 

2 3 (K9«tSE9S 

so. 90 tmmw 



[02] 



B1 



= 5 y h> VI- 



SUM 



B4 



[05] 



C 



3 



A1 



A3 



1 *» h 



C »«* ) 



A2 



M 



(15) 
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[01] 



[07] 



A. 



r 3 ' 



:p- 2 



t**t*mm 



i 3 ' 

is 

r 



, j. : 



1 Cftgtt 



[03] 



302 




305 





"^309 


"^-311 






312 



313 
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[04] 




[06] 



100 




109 
it** 



(17) 
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[08] 

» 401 
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